You must install the gssntlmssp package for upgrade and for fresh install of Privileged Access Manager. Download the appropriate versions from gssntlmssp.
Example 6-1 Installing the gssntlmssp Package
>> wget --no-check-certificate https://download.opensuse.org/repositories/openSUSE:/Backports:/SLE-15-SP4:/Update/standard/x86_64/gssntlmssp-1.2.0-bp154.2.3.1.x86_64.rpm >> rpm -i gssntlmssp-1.2.0-bp154.2.3.1.x86_64.rpm
For RHEL, install using the yum install gssntlmssp command.
Test powershell authentication to AD server using the following command: cd /opt/netiq/npum/service/local/taskmanager/framework/powershellLD_LIBRARY_PATH=/opt/netiq/npum/bin/ ./pwshNew-PSSession -ComputerName <ad_server_ip> -Credential <ad_domain>\administrator -Authentication Negotiate
To configure Privileged Access Manager to change (rotate) the password of any resource, you must enable the Password Change option value in the Credential Vault > Resources > Edit icon Password Management resource configuration and ensure that all the password change tasks are enabled. If the password change option is set to yes in a resource, this configuration will be inherited by all credentials in that resource. However, you can override them in the credential configuration. To modify the password management option of a resource, click Credential VaultPassword Management Vault Nameedit icon next to the required resource.